CVE-2021-42219: High severity ethereum blockchain vulnerability

Published Mar 16, 2022

Updated

Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of messages to a node. This is caused by missing memory in the component /ethash/algorithm.go.

Affected Software

1 affected component

Ethereum Go Ethereum=1.10.9

Event History

Mar 16, 2022

CVE Published

via MITRE·11:02 PM

Data Sourced

via MITRE·11:02 PM

Description

Frequently Asked Questions

What is CVE-2021-42219?

CVE-2021-42219 is a vulnerability in Go-Ethereum v1.10.9 that allows attackers to cause a denial of service (DoS) by sending an excessive amount of messages to a node.

What is the severity level of CVE-2021-42219?

The severity level of CVE-2021-42219 is high with a CVSS score of 7.5.

How does CVE-2021-42219 impact Go-Ethereum v1.10.9?

CVE-2021-42219 impacts Go-Ethereum v1.10.9 by causing a denial of service (DoS) due to missing memory in the component /ethash/algorithm.go.

Which version of Go-Ethereum is affected by CVE-2021-42219?

The vulnerability CVE-2021-42219 affects Go-Ethereum v1.10.9 specifically.

How can I fix CVE-2021-42219 in Go-Ethereum v1.10.9?

To fix CVE-2021-42219 in Go-Ethereum v1.10.9, update to a version that has addressed the issue or apply any patches provided by the Ethereum team.